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© A method and apparatus for authorizing access 
to telecommunications based assets and services 
includes acknowledging an attempt by a caller to 
use the service, requesting entry of a service ac- 
cess, requesting entry of an authorization code, re- 
questing voice entry of a password, verifying the 
identity of the caller based on the caller's voice, and 
allowing access to the service if the caller's identity 
is verified as being that of a valid subscriber to the 
service. 

Other methods and apparatuses are also dis- 
closed. 
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CROSS-REFERENCE TO RELATED APPLICA- 
TIONS 

This application is related to the following ap- 
plications assigned to the assignee of this applica- 
tion, filed concurrently herewith and which are 
hereby incorporated by reference as if fully set 
forth herein: 

Application Serial Number 505,855 entitled 

"Enhanced Services Platform for Telecom- 
munications Systems"; 
Application Serial Number 505,747 entitled 

"Method and Apparatus for Providing Integrat- 
ed Access to Telecommunication Based Services"; 
Application Serial Number 505,871 entitled 

"User Interfaces to Telecommunications Based 
Services"; and 

Application Serial Number 505,870 entitled 

"Call Delivery Telecommunications Service". 

FIELD OF THE INVENTION 

The present invention relates generally to 
methods and apparatus for securing access to tele- 
communications based assets and services, and 
specifically to such methods and apparatus utilizing 
voice verification to identify authorized users of 
such assets and/or services. 

BACKGROUND OF THE INVENTION 

The telecommunications industry has exper- 
ienced significant changes over recent years. More 
and more services are now being offered to cus- 
tomers which can be accessed via existing, or in 
some cases new and dedicated, telecommunica- 
tions networks. The variety of services now avail- 
able reflects the competitive nature of the market- 
place as well as the advent of new technologies. 
Telecommunications service providers are offering 
their customers a plurality of enhanced services 
designed to increase revenue and expand the util- 
ity of telephone instruments. Telecommunications 
customers - via their telephone can now access 
databases, bank accounts, securities accounts, 
messaging systems and various other services in 
addition to long distance telephone service. 

Access to these services generally is controlled 
through the use of authorization codes assigned to 
users of the services. When a customer desires 
access to a particular service to which he or she 
has subscribed, the authorization code must be 
entered, usually via the touchtone pad on the tele- 
phone instrument, before access is granted. Alter- 
natively, certain telephone equipment may permit 
the entry of the authorization code by passing a 
card similar to a credit card through a magnetic 
card reader which detects and transmits the au- 



thorization code over the telephone lines thus al- 
lowing the customer to avoid entering the code by 
hand. 

One drawback with these methods of authoriz- 
5 ing access to a telecommunications service is that 
anyone with access to a legitimate authorization 
code can access the service, thereby presenting a 
serious security problem. This problem is not 
unique to any particular sequence of steps for 

10 accessing the service, since the authorization code 
is subject to being lost or stolen. If, for example, a 
subscriber loses the authorization code, or has it 
stolen, the system can be accessed by an un- 
authorized subscriber until the authorization code is 

75 canceled. In the interim, unauthorized services can 
result in substantial financial losses to the sub- 
scriber and/or the telecommunications service pro- 
vider. Also, the subscriber is required to enroll 
once again to access the service. A new authoriza- 

20 tion code must be issued to the subscriber, and 
typically a new authorization or subscriber iden- 
tification card must be created and sent to the 
subscriber for future use. The subscriber, therefore, 
is put in the position of having to become accus- 

25 tomed to using a different and unfamiliar authoriza- 
tion code. The subscriber essentially enrolls as a 
user of the system once again. These enrollment 
procedures are significantly different than the pro- 
cedures a subscriber uses to access and use the 

30 system on a regular basis. The experience can be 
extremely frustrating for subscribers, and poten- 
tially detrimental to service providers who are de- 
pendent upon customer satisfaction for expansion 
of their services. 

35 Some telecommunications services, such as 

long distance calling for example, are accessed 
using a dialing sequence which generally requires 
that the caller first access the service and then 
seek authorization to proceed. For example, the 

40 current industry standard dial plan for long distance 
calling card service access requires a subscriber to 
first access the service by dialing a "0" followed 
by the 10-digit destination number which the sub- 
scriber is calling. The system then prompts the 

45 subscriber to enter his or her authorization code 
which typically is a 14-digit number similar to a 
credit card number. If the authorization code is 
recognized by the system as valid, service access 
is authorized and the call is completed. No com- 

50 monly available dialing plan supports the opposite 
dialing sequence, i.e., entry of the authorization 
code before entry of the destination number, and 
no currently available service using any dial plan 
incorporates the caller's voice as a system access 

55 security mechanism. 

One problem associated with the dialing se- 
quence such as that employed in connection with 
long distance calling is that since every cailer is 
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required to attempt to access the service by enter- 
ing a 10-digit destination number before authoriza- 
tion is granted, significant call hold time is wasted 
for those callers who fail the authorization step for 
one reason or another. The hold time is expensive 
and does not produce revenue for the telecom- 
munications service provider since charges are 
made only for the time the caller is connected to 
the destination number. The result is an inefficient 
use of the service provider's assets. 

SUMMARY OF THE INVENTION 

One object of the present invention is to pro- 
vide a method of authorizing access to a tele- 
communications based service network which 
makes use of a subscriber's voice to authorize 
service access. 

Another object of the present invention is to 
provide a method of authorizing access to a tele- 
communications based service network in which 
enrollment as a user of the system is transparent to 
the prospective user. 

Another object of the present invention is to 
provide a method of authorizing access to a tele- 
communications based service network in which re- 
enrollment as a user of the system is transparent to 
the user. 

Another object of the present invention is to 
provide a method of authorizing access to a tele- 
communications based service network which is 
capable of supporting a variety of different dial 
plans. 

Another object of the present invention is to 
provide a method of authorizing .access to a tele- 
communications based service network in which 
the dial plan is capable of accepting either voice 
commands or DTMF commands. 

Another object of the present invention is to 
provide a method of authorizing access to a tele- 
communications based service network in which 
the authorization codes used are user friendly 
passwords. 

Another object of the present invention is to 
provide a method of authorizing access to a tele- 
communications based service network in which 
the caller's voice is used to both identify a sub- 
scriber using speaker independent recognition and 
to verify a subscriber's identity using voice verifica- 
tion. 

Another object of the present invention is to 
provide a method of authorizing access to a tele- 
communications based service network which uses 
selected digits in a password to serve as a redun- 
dancy check to improve the performance of the 
speech recognition/identification process. 

Another object of the present invention is to 
provide a method of authorizing access to a long 



distance calling network which uses a subscriber's 
voice to authorize access to the network. 

The method of the present invention includes 
the steps of acknowledging an attempt by a caller 

s to use the system; requesting voice entry of a 
password; verifying the identity of the caller based 
on the caller's voice; and allowing access to the 
system if the caller's identity is verified as being 
that of a valid subscriber to the system. The pass- 
to word used in the method may be a word or group 
of words, but preferably includes a number or 
sequence of numbers with which the caller is famil- 
iar, such as his or her telephone number. In one 
aspect of this invention a portion of the password 

75 can be utilized to provide checksums to enhance 
the performance of the speech 
recognition/identification process as disclosed in 
U.S. Patent Application S.N. 350,060. Alternatively, 
the password may include a prefix or suffix which 

20 can be used to provide the checksums. The meth- 
od may also include entry of an authorization code 
via the DTMF keypad or via the caller's voice. In 
the case of entry of an authorization code via the 
caller's voice, the authorization code also prefer- 

25 ably acts as the password. In this embodiment of 
the present invention, voice recognition is used to 
interpret the caller's command and voice verifica- 
tion is used to identify the caller as an authorized 
subscriber to the system. 

30 Enrollment and any re-enrollment as a sub- 
scriber to the system is performed so as to be 
transparent to the user. Enrollment is accomplished 
by the caller performing the same or similar steps 
required to access the system under normal con- 

35 ditions. The caller, therefore, experiences no sig- 
nificantly different treatment when using the system 
as compared to when enrolling, or re-enrolling as a 
user of the system. 

The apparatus of the present invention includes 

40 a computer based database for storing templates 
of subscriber's voice samples. When a caller at- 
tempts to access a telecommunications based ser- 
vice network, the caller is requested to provide a 
voice sample which is compared to the stored 

45 sample in the template. If a match occurs, access 
is granted. If no match occurs, a variety of caller 
treatments may be implemented depending upon 
the goals and objectives of the service provider. 
The method and apparatus of the present in- 

50 vention can be used in connection with long dis- 
tance calling systems and networks. In such ap- 
plications, the present invention can be used to 
enhance the security afforded with current dialing 
plans, or preferably used to provide an improved 

55 dialing plan in which access lis authorized prior to 
entry of a destination number. Various modifica- 
tions can be incorporated into the use of the meth- 
od of the present invention for providing long dis- 
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tance calling services depending upon the level of 
security and service requirements desired in a par- 
ticular application. 

BRIEF DESCRIPTION OF THE DRAWINGS 

Many variations of the disclosed method may 
become apparent to those skilled in the art upon 
reading the following description of the preferred 
embodiment of the present invention taken together 
with the accompanying drawings, in which: 

Figure 1 is a flow chart showing the steps of one 
embodiment of the method of the present inven- 
tion; 

Figure 2 is a flow chart showing the steps of an 
alternative embodiment of the method of the 
present invention; 

Figure 3 is a flow chart showing the steps of and 
the embodiment of the method of the present 
invention; 

Figure 4 is a flow chart showing the steps of 
another alternative embodiment of the method of 
the present invention; 

Figure 5 is a flow chart showing the steps of one 
method of verifying the identity of a caller ac- 
cording to the method of the present invention; 
and 

Figure 6 is a flow chart showing the steps of one 
method of enrolling users in accordance with the 
method of the present invention. 

DESCRIPTION OF THE PREFERRED EMBODI- 
MENT 

The method of the present invention secures 
access to a telecommunications network or service 
by using the distinctive features of the customers 
own voice thereby providing an enhanced user 
interface while also securing access to the tele- 
communications system assets and/or services. 
The method can be used to secure access to a 
wide variety of telecommunication based services 
such as, without limitation, long distance calling, 
voice messaging systems, company virtual private 
networks, banking services, securities accounts, 
and database services. 

The method of the present invention is shown 
in the flow chart of Figure 1 . The initial step in the 
method is to acknowledge an attempt by a caller to 
access the system. This is typically accomplished 
by answering a telephone call from a caller to the 
system such as via a toll free telephone number, 
for example. The acknowledgement may take the 
form of a "beep", or a prerecorded voice response 
indicating that the caller has contacted the tele- 
communications service. 

As shown in Figure 1, the next step is to 
request from the caller entry a service access 



code. It should be noted, however, that this step 
may occur at various positions of the method as 
depicted in Figures 2-6 which illustrate alternative 
embodiments of the present invention, 
s The caller is then requested to enter his or her 

authorization code. The caller may respond in a 
variety of ways in accordance with the method of 
the present invention. First, the authorization code 
may be entered in a conventional way via the 

10 keypad of the telephone instrument being used. 
Advantages associated with this mode of entry of 
the authorization code are that the public is gen- 
erally familiar with this mode, and existing tele- 
communications services which have issued such 

is codes may continue to use them. An alternative 
mode of entry is to require the caller to say the 
authorization code. Voice recognition means can 
be employed to interpret the caller's statement of 
the authorization code, and voice verification 

20 means such as that disclosed in U.S. Patent Ap- 
plication S.N. 350,060, which is hereby incorpo- 
rated herein by reference as if fully set forth, can 
be used to determine whether or not the caller is 
an authorized subscriber to the telecommunications 

25 service by comparing the caller's voice to a stored 
version, or template, of the alleged subscriber's 
voice. In one embodiment of the present invention 
the authorization code also functions as the pass- 
word described below. A more thorough discussion 

30 of this version of the method of the present inven- 
tion will be discussed hereinafter. 

In the case of entry of the authorization code 
by conventional methods, the caller is further re- 
quested to say a password. Preferably, the pass- 

35 word is a "user friendly" phrase so acceptance of 
the method by users of the system is facilitated. 
The password may be a spoken phrase assigned 
to, or chosen by, the subscriber upon enrollment. 
Such phrases may simply be the subscriber's 

40 name, for example. The choice of phrases obvi- 
ously is virtually unlimited, and can be made de- 
pending upon the particular needs or desires of the 
telecommunications service provider. The pass- 
word also can be a familiar sequence of numbers 

45 such as the caller's home telephone number, social 
security number, or other number with which the 
subscriber is familiar. The benefit afforded by the 
present method is that the password can be cho- 
sen so as to avoid the necessity of a caller having 

so to refer to a written or printed version of the pass- 
word when it is to be entered. The more personal 
the password chosen, the less likely are the 
chances of it being lost or stolen by an unauthoriz- 
ed user. The method of the present invention is 

55 extremely flexible and adaptable to the needs of a 
particular application. 

Having received the spoken password, a com- 
parison is made between that password and a 
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stored version of it associated with the subscriber 
ostensibly seeking entry to the system. If the 
voices match, entry to the telecommunications sys- 
tem is authorized and the caller may proceed. If 
there is no match, a variety of alternatives can be 
used in keeping with the method of the present 
invention depending upon the objectives of the 
service provider. One option, of course, is to dis- 
connect the caller from the system with or without 
advance warning. This type of rather curt treatment 
of potential subscribers/customers may be un- 
desirable for a variety of reasons in many applica- 
tions. This may be particularly true when service 
providers are attempting to stimulate interest in 
usage of their service, and are highly sensitive to 
any activity which may be considered offensive to 
existing or potential subscribers. Alternative treat- 
ment may therefore be advisable in many situ- 
ations. 

One possible alternative is to have the call 
directed to an operator in the event there is no 
voice match. While this treatment may prove useful 
in some situations, it generally tends to defeat the 
overall purpose of the system. Consequently, other 
alternatives may prove to be more useful. 

Another alternative in the event of a voice 
mismatch is to request the caller to repeat the 
password, and compare this repeated version of 
the password with the stored version. If there is a 
match, authorization is granted. If there still is no 
match, it should be apparent that multiple subse- 
quent requests may be made until some predeter- 
mined limit of attempts are made to identify the 
caller. In the event of an ultimate failure to obtain a 
match any other treatment can be implemented. 

Still another alternative if there is no voice 
match, is to request entry of a personal identifica- 
tion number (PIN) via the telephone keypad. If 
there is no voice match, but the caller enters the 
correct PIN, authorization can be granted and the 
subscriber notified at the subsequent time, and if 
desired re-enrolled as described hereinafter. As 
discussed below, one aspect of the present inven- 
tion is that it can be changed and adapted to meet 
the needs of the service provider. If, for example, a 
main goal of the telecommunications service pro- 
vider is to have an interface which does not intimi- 
date subscribers and empha-sizes customer ser- 
vice, the foregoing method can be designed to 
allow one access in the event of no voice match 
after perhaps three attempts to gain access by the 
caller. 

It should be clear that one or more of the 
foregoing treatments, as well as others, can be 
utilized to accommodate a variety of situations de- 
pending upon the goals and objectives of the ser- 
vice provider. Again, the method of the present 
invention is flexible enough to accommodate di- 



verse system configurations. 

The method of the present invention also is 
adaptable to permit the use of alternate and varied 
dialing plans. One such variation includes the step 

s of acknowledging an attempt by a caller to access 
the system as discussed above. Rather than ini- 
tially requesting the service access code, however, 
the next step in the method is to request the 
caller f s authorization code as shown in Figure 2. 

10 This step is followed by requesting spoken entry of 
the caller's password. The method is capable of 
allowing entry of the authorization code and/or the 
password either verbally or manually via the tele- 
phone keypad. The identity of the caller is then 

is verified as being either a valid subscriber to the 
service or not based upon the spoken password. 
The call treatments used depending upon whether 
or not there is a voice match can be varied to meet 
the requirements of the service provider as dis- 

20 cussed above. 

Another dialing plan capable of being support- 
ed by the present method includes combining the 
authorization code and the password into one step 
as shown in Figure 3 and 4, so that the caller 

25 attempting to access the service need provide only 
one spoken phrase or sequence of digits to be 
processed by the system for the purposes of both 
recognizing the phrase and identifying the caller as 
a valid subscriber. This may be accomplished by 

30 designating selected passwords which also serve 
the purpose of authorization codes. In this alter- 
native embodiment the caller is requested to say 
his or her password, such as a home or business 
telephone number, for example. The password, of 

35 course, can be any phrase or sequence of digits 
indicative of the identity of the caller as a valid 
subscriber to the service. It is preferred, however, 
that the password be one with which the subscriber 
is familiar, thereby obviating the need to provide 

40 subscribers with written or printed versions. Sys- 
tem security is thereby enhanced. 

The method of the present invention provides 
an interface which can support several additional 
unique features. In accordance with one possible 

45 overriding theme of providing a user interface 
which is simple and easy to use from the callers 
perspective, the interface can be designed to pro- 
vide for on-line enrollment as a subscriber to the 
system the first time a caller uses the system. 

so Preferably, the enrollment process closely resem- 
bles actual use of the system from the caller's 
viewpoint so that the caller may not even be aware 
of performing any special procedure during enroll- 
ment as shown in Figures 5 and 6. 

55 Upon the initial attempt to access the service, 
when the caller is requested to say his authoriza- 
tion code or his password as the case may be, a 
template is created and stored on a computer for 
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further use to compare with the subscriber's voice 
during subsequent attempts to access the service. 
Although the template can be created using only 
one statement from the caller, it is preferable that 
the caller be requested to say the authorization 
code or password more than once to obtain a more 
reliable sampling of his or her voice. If, for exam- 
ple, it was determined for a particular service ap- 
plication that callers would be allowed three at- 
tempts to verify their identity by saying the au- 
thorization code or password, the method utilized 
upon enrollment could require three statements of 
the authorization code or password upon enroll- 
ment to create the template. Prospective subscrib- 
ers to the service could be advised as part of the 
general instructions for using the service that they 
may be requested from time to time to say their 
authorization code or password up to three times 
during their attempt to access the system. The 
procedure upon enrollment then would include no 
steps unexpected by the caller, and he or she 
would not even recognize a difference in procedure 
between enrollment and actual use of the service. 
The enrollment process would be transparent to 
the caller, thereby facilitating use of the service. 
The enrollment process itself could be secured by 
requiring the caller to enter a PIN during the enroll- 
ment process. If prospective subscribers are fore- 
warned of the possibility of needing to enter their 
PIN, no significant difference in procedure would 
be detected by subscribers during the enrollment 
process. 

A similar technique can be utilized to provide 
periodic reenrollment of subscribers as an en- 
hanced security provision. The method of the 
present invention can be designed to track the 
number of times a caller's attempts to access the 
service result in no voice match. The method can 
provide for automatic re-enrollment of the caller 
after some predetermined number of failed at- 
tempts. For example, after perhaps three attempts 
to access the service during which no voice match 
was obtained, the foregoing enrollment process 
would occur. Since subscribers would be fore- 
warned that they may be requested to repeat their 
authorization code or password a number of times, 
the subscribers would not detect any different pro- 
cedure upon undergoing the re-enroliment process, 
thereby providing an easy understandable method 
of authorizing access to telecommunication based 
services. 

The method of the present invention may be 
implemented on existing telecommunication based 
service networks, or incorporated into new net- 
works, having the voice verification capability re- 
ferred to above. Additionally, the present invention 
can be implemented on an enhanced services plat- 
form such as that disclosed in co-pending and co- 



assigned U.S. Patent Application S.N. 505,855, in- 
corporated herein by reference to provide a system 
for integrated access to a plurality of telecommuni- 
cation based services as disclosed in U.S. Patent 

5 Application S.N. 505,747, which also is incorpo- 
rated herein by reference. 

Having thus described the preferred embodi- 
ment of the present invention it will be apparent to 
those skilled in the art that changes and modifica- 

w tions may be made to the present invention without 
departing from the spirit and scope of the invention 
as defined by the appended claims. 

Claims 

75 

1- A method of authorizing access to a telecom- 
munications based service comprising the 
steps of: 

acknowledging an attempt by a caller to 
20 use the service; 

requesting entry of a service access; 

requesting entry of an authorization code; 

requesting voice entry of a password; 

verifying the identity of the caller based on 
25 the caller's voice; and 

allowing access to the service if the call- 
er's identity is verified as being that of a valid 
subscriber to the service. 

30 2. A method of authorizing access to a telecom- 
munications based service comprising the 
steps of: 

acknowledging an attempt by a caller to 
use the system; 
35 then requesting entry of an authorization 

code; 

then requesting voice entry of a password; 

then verifying the identity of the caller 
based on the caller's voice; and 
40 then requesting entry of the service ac- 

cess if the caller's identity is verified as being 
that of a valid subscriber to the system. 

3. A method of authorizing access to a telecom- 
45 munications based service comprising the 
steps of: 

acknowledging an attempt by a caller to 
use the system; 

requesting entry of the destination number 
so indicative of the service; 

requesting voice entry of an authorization 
code; 

verifying the identity of the caller based on 
the caller's voice entry of the caller's authoriza- 
55 tion code; and 

allowing access to the system if the call- 
er's identity is verified as being that of a valid 
subscriber to the system. 



6 



11 



EP 0 451 695 A2 



12 



4. The method of authorizing access to a tele- 
communications based service as defined in 
Claims 1, 2, or 3, wherein said verifying step 
comprises the step of comparing the caller's 
voice with a stored sample of the caller's 
voice. 

5. The method of authorizing access to a tele- 
communications based service as defined in 
Claim 4, further comprising the step of updat- 
ing the stored sample of the caller's voice 
upon successful verification of the caller's 
identity. 



caller to use the system; 

means for requesting entry of the caller's 
destination; 

means for requesting voice entry by the 
caller of an authorization code; 

means for verifying the identity of the call- 
er based on the caller's voice entry of the 
caller's authorization code; and 

means for allowing access to the system if 



subscriber to the service; 

allowing access to said service if said call- 
er is determined to be a subscriber, and if said 
caller is determined not to be a subscriber, 
5 storing as a voice sample of the caller the 

voice entry of the password. 

11. The calling card system as defined in Claims 8 
or 9, wherein said means for verifying com- 

w prises means for comparing the caller's voice 
with a stored sample of the caller's voice. 

12. The calling card system as defined in Claim 
11, further comprising means for updating the 
stored sample of the caller's voice upon suc- 
cessful verification of the caller's identity. 

13. The calling card system as defined in Claim 8, 
wherein said means for requesting voice entry 
of an authorization code is operable to request 
repeated entry upon enrollment of the caller as 
a subscriber to the system. 

14. The method of enrolling a caller as a sub- 
scriber authorized to access telecommunica- 
tion based services as defined in Claim 10, 
further comprising the step of repeating a pre- 
determined number of times said request for 
voice entry of a password if it is determined 
that said caller is not a subscriber to said 
service. 

15. The method of enrolling a caller as a sub- 
scriber authorized to access telecommunica- 

35 tion based services as defined in Claims 9 or 

14, further comprising the step of requesting 
entry of an authorization code indicative of the 
identity of said caller. 

16. The method of enrolling a caller as a sub- 
scriber authorized to access telecommunica- 
tion based services as defined in Claims 9 or 

15, wherein said step of requesting voice entry 
of said password is repeated. 

17. The method of enrolling a caller as a sub- 
scriber authorized to access telecommunica- 
tion based services as defined in Claim 10, 
further comprising the step of requesting entry 
of a personal identification number if it is de- 
termined that said caller is not a subscriber to 
the service. " 



the caller's identity is verified as being that of 40 
a valid subscriber to the system. 

9. A method of enrolling a caller as a subscriber 
authorized to access telecommunication based 
services, comprising the steps of: 45 

acknowledging an attempt by the caller to 
enroll as a subscriber to a service; 

requesting voice entry of a password from 
the caller and storing as a sample the voice 
entry of said password from said caller. so 

10. A method of enrolling a caller as a subscriber 
authorized to access telecommunication based 
services comprising the steps of: 

acknowledging an attempt by a caller to 55 
access the service; 

requesting voice entry of a password; 
determining whether or not said caller is a 



6. The method of authorizing access to a tele- 75 
communications based service as defined in 
Claims 1 or 3, wherein said step of requesting 
voice entry of an authorization code is re- 
peated upon enrollment of the caller as a sub- 
scriber to the system. 20 

7. The method of authorizing access to a tele- 
communications based service as defined in 
Claims 1, 2, 3, or 6, wherein said step of 
requesting entry of an authorization code pre- 25 
cedes said step of requesting entry of a ser- 
vice access code. 

8. A calling card system comprising: 

means for acknowledging an attempt by a so 



7 



EP 0 451 695 A2 



co 
ceo 

it- 



vfUJ 



LU 
U- O 
OO 

>-° 
£ 2 
LU h- 

co^ 

LU OC 
30 

ox 
wi- 
lt 3 
< 



>- 



>< 

o 

LU 

cr 




LU 








u-8 




OO 




^co 




pc CO 




V-LU 




^O 




LU O 

.-^ 




CO LU 




Lug 




o> 




lu a: 




CC LU 




to 






y^co 

en co 
luuj 
-Jo 
—Jo 
<<* 
o 



Q (n 
LU 

-JO 



O 
< 



< 



LU 
Ll_0 
OO 

o 

CO 

pen 
Slu 
So 

£lU 

o> 
Lucr 

CCUJ 
CO 



OO 

>-° 

LU 

30 

ox 

LUI— 
CCZD 



I— 

^O 
LUqc 

LU§ 

O 
LU 

cr 




5: 



8 



EP 0 451 695 A2 



?>8 




TRY 

CODE 




2 


or uj 






O 


£ o 










-j < 












o 










UJ 




cc 
O 






o m 








> E 




I— 


WLED 
P TO 




JEST 
UTHO 




ZD 
< 

>- 


Z UJ 








RIF 


<< 








LU 

> 




CO 
CO 
UJ 

o 
o 
<t 

o 



LU 

o 
o 



ir 
< 



CO 
CO 
LU 

o 

LU O 

K« 

CO LU 
LU O 

si 



is 

; O 



LU 0 

>M 
H-CC 
CO O 

LU < 

en . 



M 

or 
o 

3T 



< 

>- 
Lu 

or 

LU 




CO 
CO 
LU 

o 
o 
< 

o 



9 



' EP 0 451 695 A2 



USER ENROLLED? 


NO > 


ENROLL 






YES 

> 






COMPARE SPOKEN PASSWORD 
OR AUTHORIZATION CODE 




WITH STORED VOICE SAMPLE 



IDENTITY VERIFIED? 



YES 



CONTINUE 



FIG 5 



NO 



SERVICE OPTION 
PROTOCOL 



UPDATE STORED 
VOICE SAMPLE 



REPEAT 
REQUEST 



NO 



i 



REQUEST VOICE ENTRY 

OF PASSWORD OR 
AUT HORIZED MODE 



ENROLLED USER? 



Ino 



VOICE SAMPLE 
REPEATED N TIMES 



YES 



STORE VO ICE SAMPLE 
I 



CONTINUE 

FIG. 6 



YES 



* CONTINUE 



REQUEST PIN 



10 



